Arch Linux

ggstudy

Member

Registered: 2015-01-01

Posts: 7

Setup a VPN server, but only parts of websites can be visited???

I follow openvpn guide to setup VPN server on Linux well.
Configure iptables well.
Setup Windows8 VPN client well.
Dial up to VPN server and connected well.
Now I can visit website through VPN, great!

But, wait a minute!
Only parts of website can be visited, some websites can not be visited, the chrome shows "wating for <website> response..." and then shows website can not be visited error.

I can visit www.yahoo.com, www.imdb.com, but can not visit www.rottentomatoes.com

Your great supports are highly appreciated!!!

Thanks a lot and happy new year!

#=================================
The working environment is some like this:

1. A Linux server (ServerA) connects to the public network.
2. My Windows laptop (ClientB) dials up to the public network.
3. I'd like to setup a VPN on ServerA for ClientB's better network access speed.

Last edited by ggstudy (2015-01-01 10:28:59)

ggstudy

Member

Registered: 2015-01-01

Posts: 7

Re: Setup a VPN server, but only parts of websites can be visited???

/etc/ppp/options.pptpd:

#================
lock
ms-dns 8.8.4.4
ms-dns 8.8.8.8
proxyarp
name pptpdvpn
nobsdcomp
nologfd
novj
novjccomp
refuse-chap
refuse-mschap
refuse-pap
require-mppe-128
require-mschap-v2
#===============

ggstudy

Member

Registered: 2015-01-01

Posts: 7

Re: Setup a VPN server, but only parts of websites can be visited???

/etc/sysconfig/iptalbes:

#============
# Generated by iptables-save v1.4.7 on Thu Jan  1 17:05:37 2015
*raw
:PREROUTING ACCEPT [0:0]
:OUTPUT ACCEPT [1:152]
COMMIT
# Completed on Thu Jan  1 17:05:37 2015
# Generated by iptables-save v1.4.7 on Thu Jan  1 17:05:37 2015
*mangle
:PREROUTING ACCEPT [0:0]
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [1:152]
:POSTROUTING ACCEPT [1:152]
COMMIT
# Completed on Thu Jan  1 17:05:37 2015
# Generated by iptables-save v1.4.7 on Thu Jan  1 17:05:37 2015
*nat
:PREROUTING ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A POSTROUTING -s 192.168.11.0/24 -o eth1 -j MASQUERADE
COMMIT
# Completed on Thu Jan  1 17:05:37 2015
# Generated by iptables-save v1.4.7 on Thu Jan  1 17:05:37 2015
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [1:152]
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -i eth0 -j ACCEPT
-A INPUT -i ppp0 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 22 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 1723 -j ACCEPT
-A INPUT -p gre -j ACCEPT
-A INPUT -p icmp -j ACCEPT
COMMIT

#============

ggstudy

Member

Registered: 2015-01-01

Posts: 7

Re: Setup a VPN server, but only parts of websites can be visited???

/etc/pptpd.conf

#==========
option /etc/ppp/options.pptpd
logwtmp
localip 192.168.11.1
remoteip 192.168.11.230-238

#==========

ggstudy

Member

Registered: 2015-01-01

Posts: 7

Re: Setup a VPN server, but only parts of websites can be visited???

/var/log/messages:

#=============
Jan  1 18:45:56 kezhi-vm1 pptpd[11315]: CTRL: Client 115.195.xxx.xxx control connection started
Jan  1 18:45:56 kezhi-vm1 pptpd[11315]: CTRL: Starting call (launching pppd, opening GRE)
Jan  1 18:45:56 kezhi-vm1 pppd[11316]: Plugin /usr/lib64/pptpd/pptpd-logwtmp.so loaded.
Jan  1 18:45:56 kezhi-vm1 pppd[11316]: pppd 2.4.5 started by abcd123, uid 0
Jan  1 18:45:56 kezhi-vm1 pppd[11316]: Using interface ppp0
Jan  1 18:45:56 kezhi-vm1 pppd[11316]: Connect: ppp0 <--> /dev/pts/2
Jan  1 18:45:59 kezhi-vm1 pppd[11316]: peer from calling number 115.195.xxx.xxx authorized
Jan  1 18:45:59 kezhi-vm1 pppd[11316]: MPPE 128-bit stateless compression enabled
Jan  1 18:46:01 kezhi-vm1 pppd[11316]: Cannot determine ethernet address for proxy ARP
Jan  1 18:46:01 kezhi-vm1 pppd[11316]: local  IP address 192.168.11.1
Jan  1 18:46:01 kezhi-vm1 pppd[11316]: remote IP address 192.168.11.230

#=============

ggstudy

Member

Registered: 2015-01-01

Posts: 7

Re: Setup a VPN server, but only parts of websites can be visited???

Thanks!!!

ggstudy

Member

Registered: 2015-01-01

Posts: 7

Re: Setup a VPN server, but only parts of websites can be visited???

Does anyone know how to resolve this? Thanks a lot!